Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Register

Quick Links


Categories

In this Discussion

› › CDP.me - Open Source Linux Server Backups - Page 7
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

CDP.me - Open Source Linux Server Backups

1…457910…12

Comments

  • jvnadrjvnadr Member

    @PetaByet Without wanting to be demanding, is there any ETA about the "restore on another server / ip" feature?

  • PetaByetPetaByet Member

    @EkaatyLinux said:
    PetaByet Does CDP provide a way to see the files inside backups? Can I restore backups in a per file/dir way? Ex.: I want to see if /etc/any.conf exists and restore it to the original node or for other. Is this possible?

    I'm pretty sure tar doesn't support this.

    @jvnadr said:
    PetaByet Without wanting to be demanding, is there any ETA about the "restore on another server / ip" feature?

    This week! :)

    Thanked by 1jvnadr
  • shivohamshivoham Member
    edited December 2014

    @PetaByet Please ad plesk backup in your next update too :)

  • PetaByetPetaByet Member

    @shivoham said:
    PetaByet Please ad plesk backup in your next update too :)

    Plesk doesn't have an easy API to work with. It's easier if you use the file backup and database backup functions.

  • trvztrvz Member
    edited December 2014

    @shivoham

    It's easier if you use the file backup and database backup functions.

    Or don't be a noob and stop using Plesk.

  • PetaByetPetaByet Member

    @tr1cky said:
    Oh, nice script. On a sidenote, it should mention somewhere that the entire /var/www folder gets deleted. I wasn't aware of that, lol.

    That's why the installer asks for a 'fresh' OS installation.

  • GoDeTGoDeT Member

    Thanks for sharing, awesome...

    Thanked by 1PetaByet
  • afterSt0rmafterSt0rm Member
    edited December 2014

    @PetaByet Does CDP provide a way> @PetaByet said:

    This week! :)

    @PetaByet, actually tar does provide a way to list all files inside a tarball. You can find it at tar man(1) doc:

    tar -tvf archive.tar
# List all files in archive.tar verbosely.

    This should work for compressed files as well. Just put the flag that matches the compression algorithm that you have used:

    $ tar -ztvf sometarfile.tar.gz

    or

    $ tar -jtvf sometarfile.tar.bz2

    or any other algorithm.

    If you are compressing with gzip or just putting files together without compressing it, you can use less:

    $ less sometarfile.tar.gz

    Less provides a very graceful output, just like ls -l. And tar does have a function to pull just one file or directory from one archive too:

    $ tar -zxvf sometarfile.tar.gz somedir/subdir/justafile

    If you want to pull a dir you just use the same command but point to the dir path inside the tar file. Note that you dont use a / at the beginning of the internat tar dir path:

    $ tar -zxvf sometarfile.tar.gz somedir/subdir/

    This works for any compression algo. used to compress the tarball. You can extract all files that match a wildcard inside the tar file:

    tar -zxvf sometarfile.tar.gz --wildcards --no-anchored '*.conf'

    Or the same wildcard inside a specific dir:

    tar -zxvf sometarfile.tar.gz somedir/subdir/ --wildcards '*.conf'

  • PetaByetPetaByet Member

    @EkaatyLinux Create an issue in GitHub please :).

  • afterSt0rmafterSt0rm Member

    @PetaByet said:
    EkaatyLinux Create an issue in GitHub please :).

    It's opened.

  • PetaByetPetaByet Member

    @EkaatyLinux said:
    It's opened.

    Thanks, will have a look at this.

  • PetaByetPetaByet Member

    CDP v1.0 is out!

    Backup Encryption (GPG Public Key)
2 Factor Authentication (Google Authenticator)
PHP / HTML isolation (Smarty Templates)
New Backup Restoration Interface
Restore Backups to Another Server
New UI

    Link: https://github.com/PetaByet/cdp/releases/tag/V1.0

    New screenshots: http://imgur.com/a/yPALv

    I shall have some exclusive Vultr storage VPS coupons for you in a few days :).

    Thanked by 2M66B xDutchy
  • raindog308raindog308 Administrator, Veteran

    @PetaByet - first, nice to see someone taking backups seriously.

    However...I personally would never use this.

    The problem is that you're pushing backups from the client to the backup server. If your client (the VPS being backed up) is ever compromised, the attacker can easily wipe out your backups, too. The attacker has all the backup config info, keys, etc.

    I always have my backups pulled from the backup server for this reason. The backup server contacts the client and does an rsync, rotating directories on its end if I want the ability to go back in time.

    rsync over ssh is possible, but I don't recommend it because then you have to have lots of clients trusting the backup server's key. If the backup server is compromised...

    So instead I run rsyncd, which can be setup read only, only allowing one concurrent connection, with a password, only permitting access from the master(s), and of course you can lock it down with iptables as well.

    Admittedly, this is more of a headache to setup, but it's the only solution I've found (other than running a proper backup client like R1Soft, bacula, etc.) that meets all the requirements.

    Thanked by 1Spencer
  • socialssocials Member

    @raindog308 said:
    So instead I run rsyncd, which can be setup read only, only allowing one concurrent connection, with a password, only permitting access from the master(s), and of course you can lock it down with iptables as well.

    So if the backup server gets compromised, one has full read-only access to every node? In that case, the attacker could easily rsync all the servers' private keys, sensitive files etc to the backup server and then transfer those to somewhere else?

  • raindog308raindog308 Administrator, Veteran

    socials said: So if the backup server gets compromised, one has full read-only access to every node? In that case, the attacker could easily rsync all the servers' private keys, sensitive files etc to the backup server and then transfer those to somewhere else?

    Depends what you backup - I exclude root's .ssh dir.

    In fact, I only rsync backups that are created locally on the server. So:

    • the server does a backup, which creates an image in /somedir. This backup includes config stuff (e.g., what packages are installed, etc.), mysql/Pg/whatever dumps, copies of whatever needs to be backed up, etc.
    • the backup server comes along and says "are you done with your backup? oh you're still in the process of making it? I'll wait". Usually this doesn't happen because I set up the cron timing logically.
    • backup server says "oh I see you're done, I'll now backup"
    • backup server rsync's /somedir

    I'd like to find a proper distributed batch management system for BSD/Linux but one doesn't seem to exist and so far I've been too lazy to write one.

  • socialssocials Member

    @raindog308 said:
    In fact, I only rsync backups that are created locally on the server.

    Oh, alright. That's exactly what I do, although I push the (encrypted) backup to the backup server.

    That way the backup server doesn't have any kind of access to nodes + even if the backup server gets compromised, everything is encrypted anyway. I believe this is the most secure "home-made" backup solution.

  • afterSt0rmafterSt0rm Member

    @xDutchy said:
    CDP as a Service

    This isn't a good idea by now. CDP is using JSON files as database what should not be used for more than a couple of users. When the system grows and create a large number of any data that is stored on these files CDP will get slower, and slower, and slower.

    The security of the system isn't that good as well. I'm working to implement a better user management system for CDP.

    CDP is very good and is getting powerful over the time but need some improvement to turn into a software powerful enough to that use.

  • xDutchyxDutchy Member

    @EkaatyLinux said:
    CDP is very good and is getting powerful over the time but need some improvement to turn into a software powerful enough to that use.

    Wasnt planning to :) Someone seems to want ACL and pre-defined resources etc etc. Just answered the 'why'

  • afterSt0rmafterSt0rm Member

    @xDutchy said:
    Wasnt planning to :) Someone seems to want ACL and pre-defined resources etc etc. Just answered the 'why'

    Desculpe. Mas o meu conselho continue sendo válida: p

  • PetaByetPetaByet Member

    @raindog308 @socials What about an optional server agent?

  • afterSt0rmafterSt0rm Member

    @PetaByet said:
    raindog308 socials What about an optional server agent?

    Unison can be the server agent. You can make a API for auth when client is trying to push backups to the server.

  • PetaByetPetaByet Member

    @EkaatyLinux said:
    Unison can be the server agent. You can make a API for auth when client is trying to push backups to the server.

    :)

  • JohnRoeJohnRoe Member

    I have problem with these Linux on Online.net's dedi.

    Debian 7 64bit - permission error even I ran on root.. 
Ubuntu 14.04 64bit - files were put in /var/www/ but in apache's conf, /var/www/html was set. I changed the config to /var/www/, but the server added in cdp panel doesnt stored. The server list still empty even I added servers many times.

    and the last option left, Centos 7 which doesnt fit with cdp..

  • comebackcomeback Member

    hello,

    I cdp.me install on a new machine with centos 6.5.

    Voic what I do:

    yum update -y

    /usr/bin/env bash <((wget -qO - cdp.me/install.sh))

    When I want to add a server, it does not work.

    The server is not registered.

    Thank you for your help

  • PetaByetPetaByet Member

    @comeback @psycholyzern Please try now.

  • JohnRoeJohnRoe Member

    @PetaByet said:
    Please try now.

    Im reinstalling debian 7 on my online.net's dedi.. will share the result

  • JohnRoeJohnRoe Member 
    Backup task has been started, please do not close this window

Message has been sent

    what now? No files has been backup.

  • NeoonNeoon Community Contributor, Veteran

    As Backup Server, i just add some password for a non root user on a storage boxor what?

  • PetaByetPetaByet Member

    @psycholyzern said:
    Backup task has been started, please do not close this window

    Message has been sent

    what now? No files has been backup.

    Did you get any errors or emailed a backup log (email can be set in config.php)?

    @Infinity580 said:
    As Backup Server, i just add some password for a non root user on a storage boxor what?

    Password or SSH key for any user that has enough previleges to tar the directory(s).

  • whmsyswhmsys Member

    Is it possible to backup full cpanel server like as all cPanel account under whm ?

Sign In or Register to comment.